Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: KPpH/kM/ZXiuV7tnAzlfS/bnJUD5VC9BSaRmtD86FBE=
Subject key identifier: D5:59:DB:EA:19:3C:6D:34:F1:4B:E1:DB:F6:8E:00:79:56:46:FA:DD
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0194BD1782D8CD7706131F26E2E3CB684935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0DFD
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: QL3UG4WiCBsZYAK5fBMe6sDVuyHFv58dnR1v+r4H+Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:82:d8:cd:77:06:13:1f:26:e2:e3:cb:68:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=d559dbea193c6d34f14be1dbf68e00795646fadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:ad:57:23:60:99:62:8e:26:7c:bb:09:41:
93:c6:63:c4:90:93:c7:b7:01:9c:91:ee:89:7e:98:
63:9f:73:be:fc:1f:68:7c:1d:3a:78:3e:4e:7e:74:
28:65:3f:3d:05:d0:d8:48:6d:9c:69:d2:e6:04:ac:
2d:ad:f4:e3:0b:a0:70:11:a2:29:46:78:80:21:02:
18:4f:24:13:9b:43:ce:34:5c:f2:61:cf:41:b1:66:
38:29:85:68:dc:8a:f0:51:29:cf:1c:78:5c:cd:80:
c7:e6:53:46:0f:e7:c7:47:79:df:fb:44:b4:a1:5e:
3f:7e:59:c9:fe:0c:7a:41:8f:7e:10:04:f4:15:28:
35:3d:c8:6b:71:a0:63:7c:a9:e0:ba:90:ef:61:b8:
68:40:fe:fb:a7:0e:9c:e9:dc:d6:1b:6f:7c:c4:55:
97:27:ba:1e:24:48:38:a5:8c:8b:cb:30:68:44:8b:
8e:48:d7:11:8e:c5:3b:df:e7:e4:33:dc:b4:5a:d5:
8c:38:4d:d7:f9:1b:05:4e:4b:d4:2f:17:60:d9:6f:
eb:28:82:5b:8f:71:fd:69:98:9c:85:02:3f:15:ec:
fb:18:7b:c4:cf:fb:20:74:16:19:51:a7:87:c9:71:
b6:05:13:d5:90:0d:ac:cd:4d:1c:34:35:4b:34:73:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:DB:EA:19:3C:6D:34:F1:4B:E1:DB:F6:8E:00:79:56:46:FA:DD
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:e7:0d:22:24:56:46:eb:e7:16:53:fc:69:5e:c3:0b:06:
f5:f8:fb:f6:dc:c7:d4:e0:ad:6e:bb:84:f9:72:28:0a:6f:db:
be:be:f8:17:ff:25:08:ca:fa:57:b7:8c:4f:06:50:53:db:d0:
ec:2a:09:1c:bb:4c:06:2a:d9:03:a4:5a:d4:7d:9f:c2:3a:ec:
92:ed:e6:1e:92:82:b6:e7:fe:c4:17:1a:d0:fd:af:e8:d7:03:
cd:84:1b:64:52:58:45:8f:02:99:f9:78:3b:c6:36:78:71:de:
d6:10:4a:c3:f7:ee:e0:bd:98:50:0a:9e:4e:96:ca:17:1e:5e:
7a:45:33:07:b3:53:11:3a:50:20:eb:da:92:87:e3:e9:ec:74:
67:e0:93:a9:43:92:ca:13:50:2b:c5:49:95:8b:d7:58:c4:d2:
1e:8a:58:dc:4e:f1:d4:b0:fd:d8:9d:56:17:1a:31:de:c2:92:
ff:81:10:c3:a4:63:c5:f3:6a:cd:7b:bf:39:57:ae:fc:8d:46:
4f:99:2e:d2:cd:37:73:53:ed:d4:56:db:78:7a:7b:6d:cc:6a:
70:4d:66:0c:d0:5e:1f:50:ba:e0:5c:a6:07:91:82:e1:4c:97:
12:3a:98:37:41:1a:83:19:16:86:eb:99:19:5d:02:5f:8f:a2:
a9:b8:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:06 2025 by rpki-client